Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/SdYpPqHq5ICshmRyTRxsyxaDOiE.roa
File:                     SdYpPqHq5ICshmRyTRxsyxaDOiE.roa (raw, json)
Hash identifier:          Wj5dtU8tlaV8bka7fZ3u6UGjUyWX/Zwb4xrfkXBvROs=
Subject key identifier:   49:D6:29:3E:A1:EA:E4:80:AC:86:64:72:4D:1C:6C:CB:16:83:3A:21
Certificate issuer:       /CN=AEEB992E910DD690365E5E9B86B6ED210578721C
Certificate serial:       10
Authority key identifier: AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/SdYpPqHq5ICshmRyTRxsyxaDOiE.roa
Signing time:             Wed 04 Sep 2024 06:59:53 +0000
ROA not before:           Wed 04 Sep 2024 06:59:53 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     24255
IP address blocks:        64.33.0.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEEB992E910DD690365E5E9B86B6ED210578721C
        Validity
            Not Before: Sep  4 06:59:53 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=49D6293EA1EAE480AC8664724D1C6CCB16833A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:21:f7:72:c4:28:79:dd:a2:2b:97:84:54:
                    60:3e:8f:41:ed:7f:15:1e:b0:7c:59:a7:bb:5e:a1:
                    2c:bf:b1:a9:59:a9:98:03:f4:24:16:64:58:40:2d:
                    4d:71:1a:69:bb:1a:c9:0f:61:ab:a3:6a:67:23:ef:
                    ca:8b:b9:d2:2d:91:fc:32:b3:b6:b1:ad:cb:3f:d0:
                    2d:ac:7d:93:f0:89:6f:5a:43:29:93:3f:e5:93:2f:
                    40:a2:a4:50:2a:64:7a:af:3c:bb:ec:b7:af:41:b6:
                    76:5d:6d:3d:84:f6:8e:fd:fd:6c:ff:8f:d9:37:7a:
                    74:34:b8:a5:19:43:84:37:57:08:07:6e:b5:7c:52:
                    ee:d0:ca:95:a7:d6:f8:3b:de:d4:12:1c:70:ee:f0:
                    bc:5a:1a:3b:59:58:70:12:5a:6b:ae:69:bf:0e:73:
                    f8:5b:12:a7:d5:06:49:72:32:9c:4d:46:67:1f:cb:
                    db:fd:05:94:42:9e:a4:17:b4:6a:94:69:f2:47:29:
                    89:6a:11:25:ed:0f:14:c7:fe:36:a3:9e:bd:0d:52:
                    20:54:00:0c:42:42:51:cb:75:4c:b0:49:88:54:09:
                    a1:19:c1:7f:23:f6:6a:28:af:df:3b:7c:bd:d3:ea:
                    fe:e0:d4:f8:12:21:5c:44:78:f1:03:7c:b8:55:68:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D6:29:3E:A1:EA:E4:80:AC:86:64:72:4D:1C:6C:CB:16:83:3A:21
            X509v3 Authority Key Identifier:
                keyid:AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/SdYpPqHq5ICshmRyTRxsyxaDOiE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:73:8e:85:fb:28:e4:a1:58:17:b6:aa:eb:7f:3e:98:df:cd:
         07:6f:c6:81:a0:c9:9c:3d:52:2f:8f:57:8c:7b:35:60:da:6a:
         00:e7:14:4e:4e:f8:b2:a8:89:fa:96:a9:bd:67:2d:73:cb:4b:
         f9:56:dd:7a:86:cc:24:c7:27:64:c3:ce:ef:bd:52:66:c3:9c:
         3e:53:d4:ae:f7:f4:fc:7d:d2:63:cd:3b:88:0c:fe:06:b3:a2:
         ca:fd:ff:a3:18:2b:92:86:7f:04:19:0c:9a:c4:58:bc:e0:b8:
         1f:79:da:46:92:3d:61:e0:4f:a6:20:1a:49:78:a7:30:7c:0c:
         d3:82:22:9a:20:7c:ef:61:c3:70:dd:d3:d8:76:11:11:6e:65:
         ac:28:8c:07:06:26:be:60:e2:e0:4b:b3:26:05:19:ca:52:22:
         bc:e1:b7:08:2b:fb:a2:6a:ca:9f:37:59:be:58:02:73:3d:a2:
         bd:9f:4d:a8:99:be:75:2a:c8:c1:62:20:d8:60:7a:b7:d9:30:
         6a:92:4b:27:57:f0:e8:33:ca:8d:63:5e:8c:33:31:5b:2b:a9:
         72:a3:c5:6b:64:0e:ad:45:25:ae:92:48:57:31:3b:b7:fd:be:
         8c:c6:dc:2c:03:85:56:8d:d7:9e:09:72:08:72:f7:19:ba:76:
         bb:ea:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:26 2024 by rpki-client on console-fra.rpki-client.org